Council demanded payment card details via email

A London local authority requested security codes among other details be sent via a Word document.